packages/net/strongswan4/patches/400-CVE-2012-2388.patch
jow 6ae933bd34 [packages] strongswan4: backport 4.6.3 patch (CVE-2012-2388, #11576)
git-svn-id: svn://svn.openwrt.org/openwrt/packages@32034 3c298f89-4303-0410-b956-a3cf2f4a3e73
2012-06-03 13:34:34 +00:00

22 lines
665 B
Diff

From 5a858c3197bbda9acda5289003e9015bef560dc7 Mon Sep 17 00:00:00 2001
From: Martin Willi <martin@revosec.ch>
Date: Mon, 7 May 2012 13:51:46 +0200
Subject: [PATCH] Fix boolean return value if an empty RSA signature is
detected in gmp plugin
---
src/libstrongswan/plugins/gmp/gmp_rsa_public_key.c | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
--- a/src/libstrongswan/plugins/gmp/gmp_rsa_public_key.c
+++ b/src/libstrongswan/plugins/gmp/gmp_rsa_public_key.c
@@ -137,7 +137,7 @@ static bool verify_emsa_pkcs1_signature(
if (signature.len == 0 || signature.len > this->k)
{
- return INVALID_ARG;
+ return FALSE;
}
/* unpack signature */